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(57) ABSTRACT 

A peripheral device and method are provided for reliably 
updating and checking firmware or other coded information 
stored within a nonvolatile memory of the device. The 
device comprises a microcontroller and a memory with a 
fixed part and an updateable part. Both the fixed part and the 
updateable part store firmware. When firmware in the 
updateable part is updated (such as by using a USB con- 
nection with a host PC), a first error detection code is 
generated and stored in the updateable part. As part of an 
initialization procedure, the firmware stored in the fixed part 
generates a second error detection code based on the updated 
firmware stored in the updateable part and compares the 
second error detection code to the first error detection code 
stored in the updateable part. If the error detection codes 
indicate that the firmware stored in the updateable part is 
valid, the microcontroller uses the firmware stored in the 
updateable part to operate the device; otherwise, the micro- 
controller uses firmware stored in the fixed part to operate 
the device. 

7 Claims, 2 Drawing Sheets 
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METHOD AND APPARATUS FOR UPDATING 
FIRMWARE 

BACKGROUNG OF THE INVENTION 

1. Field of the Invention 

The present invention relates to an apparatus and methods 
for reliably updating firmware or other coded information 
stored within a nonvolatile memory of a peripheral device. 

2. Description of the Related Art 

Various types of microcontroller-controlled devices exist 
which are adapted to communicate with a PC or other type 
of computer. These devices include, for example, optical 
drives, magnetic disc drives, hard drives, modems (both 
internal and external), Personal Digital Assistants (PDAs), 
solid state memory cards, network interfaces, video 
cameras, digital cameras, printers, scanners, and fax 
machines. These and other such devices will be referred to 
herein as "peripheral devices," and the computer with which 
the device communicates will be referred to as the "host 
computer." 

Some peripheral devices are capable of receiving firm- 
ware modifications or updates from the host computer, such 
as to eliminate bugs or to add new functions to the device (as 
used herein, "firmware " refers to the executable code and 
any associated data used to control the operation* of the 
device). Some peripheral device bus standards, such as 
Universal Serial Bus (USB), allow a user to unplug and plug 
(disconnect and connect) a peripheral device, such as a 
CD-R/W drive, while the host computer is running. In some 
instances, a user may unintentionally (or intentionally) 
unplug or disconnect a peripheral device from the peripheral 
device bus, or turn off the host computer, while the periph- 
eral device is receiving or processing a firmware update 
from the host computer. This may result in corrupted firm- 
ware being stored in the nonvolatile memory of the periph- 
eral device, and can potentially render the device inoperable. 
In addition, there are other situations, such as a momentary 
power failure during firmware updates, which may result in 
incomplete or corrupted firmware. 

A CD-R/W drive is a type of peripheral device that is 
capable of recording and reading data to and from an optical 
disk. A CD-R/W drive may communicate with a host 
computer, such as a personal computer (PC), over a periph- 
eral device bus, such as a Universal Serial Bus (USB). As 
described below, a CD-R/W drive is one type of peripheral 
device to which the present invention may be applied. 

SUMMARY OF THE INVENTION 

The present invention relates to a system and method for 
reliably updating and checking firmware stored within a 
nonvolatile memory of a peripheral device. In accordance 
with the invention, the nonvolatile memory includes a fixed 
portion and an updateable portion. The updateable portion 
stores an updateable version of the basic firmware for the 
device, and stores a corresponding error detection code 
(preferably a CRC code) to permit the validity of such 
firmware to be verified. The fixed portion contains an 
initialization routine, and includes a default version of the 
device 's basic firmware 

To update the device's firmware, the host transmits to the 
device the new version of the updateable firmware together 
with a corresponding error detection code, and both are 
stored in the updateable portion in place of the existing 
firmware and error detection code. When the device is reset, 
the device's microcontroller executes the initialization rou- 
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tine to perform an initialization sequence. As part of this 
sequence, the microcontroller calculates the error detection 
code for the firmware currently stored in the updateable 
portion and then compares this value to the error detection 

5 code stored in the updateable portion. If a match occurs, the 
updateable version is deemed valid and is used to control the 
device; otherwise, the default version stored in the fixed 
portion is used. In the event of a mismatch, the user may also 
be notified by sending a message to the host computer and/or 

10 by displaying a message on a display of the peripheral 
device. 

BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 illustrates one configuration of an apparatus in 
15 accordance with one embodiment of the present invention. 

FIG. 2 illustrates one configuration of a nonvolatile 
memory associated with the apparatus of FIG. 1, and illus- 
trates a firmware update process. 

20 DETAILED DESCRIPTION OF THE 

PREFERRED EMBODIMENTS 

A preferred embodiment of the present invention is 
described herein, which is intended to illustrate, and not 
limit, the scope of the invention. 

FIG. 1 illustrates one embodiment of a peripheral device 
100 suitable for use with one embodiment of the present 
invention. The device 100 may be provided with its own 
housing and configured to be external to a host computer 

3Q housing (not shown). Alternatively, in another embodiment, 
the device 100 is configured to be mounted within a host 
computer housing. In FIG, 1, the device 100 is coupled to a 
host computer 90, such as a personal computer. The host 
computer 90 includes a host microprocessor (not shown), 

35 such as a Pentium III or a Sun Sparc processor. The host 
computer 90 typically runs an appropriate operating system, 
such as Microsof® Windows 98, Microsoft® Windows® 
NT, the Apple® MacOS®, Unix, Linux, or IBM®OS/2® 
operating systems. The device 100 is coupled to the host 

4Q computer 90 via a peripheral device bus, such as a USB bus 
110. In other embodiments, other bus architectures or inter- 
faces may be used in place of the USB bus 110, such as an 
IEEE 1394 interface, an Integrated Drive Electronics (IDE)/ 
ATAPI interface or a Small Computer Standard Interface 

45 (SCSI). In addition, the invention can be used where the 
firmware updates are made over an infrared or other wireless 
interface. 

The device 100 comprises an optical disc drive 112, a 
USB bridge board 102 and a power supply 114. The device 

50 100 is preferably compliant with the USB specification, 
Revision 1.1 and with the USB mass storage class definition. 
The disk drive 112 may be, for example, a compact disc 
read/write drive (CD-RIW drive). Alternatively, the present 
invention may be implemented with other devices as well. 

55 For example, the peripheral device could be a hard drive, a 
DVD drive, a magnetic disc drive, a modem (either internal 
and external), a Personal Digital Assistant (PDA), a solid 
state memory, a scanner, a printer, a network interface, a fax 
machine, a video camera, a digital camera, or the like. 

60 The CD-R/W drive is configured to accept rewritable CD 
(CD-RW) discs, write-once CD (CD-R) discs, CD-ROM 
discs, and musical CDs. Similarly, if the drive 112 is a DVD 
drive, the drive 112 may be capable of accepting the various 
CD disc-types, as well as rewritable DVD discs, write-once 

65 DVD discs, and read-only DVD discs. 

In FIG. 1, the CD-R/W drive 112 is a standard Advanced 
Technology Attachment Packet Interface (ATAPI) CD-R/W 
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drive. The USB bridge board 102 comprises a USB con- user when the firmware stored in the updateable portion is 

troiier 104, a microprocessor or microcontroller 106, an determined to be corrupt. 

ATAPI interface 108 and a buffer memory 116. The buffer The fixed part 222 preferably remains unchanged when 

116 may be a FIFO. The drive 112 is coupled to the USB the host 90 downloads firmware updates. Thus, the firmware 

bridge board 102 via the ATAPI interface 108, and the USB 5 stored in the fixed part 222 will not be lost or corrupted by 

bridge board 102 is coupled to the host 90 via the USB bus incomplete downloading by the host 90 to the flash memory 

110. 105. The firmware stored in the fixed part 222 preferably 

In general, the USB bridge board 102 receives ATAPI implements all of the basic functions needed for the device 

packet commands from the host 90 via the USB bus 110 and 100 to operate properly. Thus, the disk drive 112 may 

transfers the packets to the drive 112 via the ATAPI interface 10 operate normally, using the firmware stored in the fixed part 

108. The bridge board 102 transfers data between the USB 222, if the updateable part becomes corrupted, 

bus 110 and the ATAPI interface 108 and uses the buffer 116 In the preferred embodiment, the product is shipped with 

to buffer the data being transferred. The bridge board 102 valid firmware stored in both the fixed and updateable parts 

handles USB and/or ATAPI protocol, such as composing and 220, 222, with valid total byte count and checksum valves 

decomposing packets for the USB bus 110, and appropri- 15 252, 254 (reflecting the firmware stored in the updateable 

ately accesses ATAPI registers (not shown) for the ATAPI part 220) stored in the check code table 246. Alternatively, 

interface 108. Thus, the USB bridge board 102 advanta- the device 100 could be shipped with no valid firmware in 

geously permits a standard ATAPI drive 112 to be connected the updateable part 220, in which case the absence of valid 

to a USB bus 110. Alternatively, in another embodiment, the firmware can be reflected by a total byte count 252 of zero 

optical drive 112 is directly USB compatible. 20 or an invalid checksum. 

In FIG. 1, the microcontroller 106 manages the operation The operation of the device 100 and the flash memory 105 
of the bridge board 102. The USB controller 104 handles the is described with reference to FIGS. 1 and 2. In a power- 
interface to the USB bus 110. The buffer 116 is sized to allow on/reset block 250 in FIG. 2, the microcontroller 106 
data to be read or written in a stream from or to the optical receives a power-on or a reset signal from the host 90. The 
disc. In one configuration, the buffer 116 is 2 Mbytes in size, 25 microcontroller 106 begins executing the start-up module 
but other buffer sizes may alternatively be used. Power for 258 of the default operating task 224 in the fixed part 222. 
the device 100 may be provided by a local power supply 114. The start-up module 258 initializes hardware and initializes 
In another embodiment, the device 100 may be powered by variables (not shown). In a decision block 260 of FIG. 2, the 
the USB bus 110 itself. default operating task 224 determines whether the firmware 
X In FIG. 1, the microcontroller 106 comprises an internal stored in the updateable part 220 is valid. In the preferred 
( flash memory 105, which contains firmware used to control embodiment, the validity is checked by calculating a check- 
) the operation of the device 100. Alternatively, in another sum for the firmware stored in the updateable part 220, and 
f configuration, the memory 105 is external to the microcon- then comparing this checksum to the checksum value stored 
\ troller 106. In addition, other types of nonvolatile memories, 35 in the check code table 246. If a match occurs, the firmware 
/ such as EEPROMS, could be used instead of or in addition in the updateable part 220 is deemed valid. 
( to the flash memory. The checksum valve 254 is preferably calculated by 
^ FIG. 2 illustrates one configuration of the flash memory software on the host side which prepares the firmware 
105 associated with the microcontroller 106 of FIG. 1, and updates before the updates are sent across the USB bus 110. 
illustrates a firmware update process. The flash memory 105 40 Alternatively, the checksum could be provided by the devel- 
comprises two portions, an updateable part 220 and a fixed oper or distributor with the update. Various error detection 
part 222. The updateable part 220 stores one or more tables, codes or data checking methods, such as cyclic redundancy 
such as a check code table 246, and one or more tasks, such codes (CRC), may be used to check the validity of the 
as an updateable operating task 240, an updateable host firmware stored in the updateable part 220. 
interface task 242 and an updateable drive task 244. Each 45 If the firmware stored in the updateable part 220 is valid, 
task comprises one or more modules (not shown), and each then the default operating task 224 proceeds to the operating 
module comprises one or more firmware functions (not task 240 stored in the updateable part 220, as shown in FIG. 
shown). The check code table 246 comprises data values, 2. The operating task 240, the host interface task 242 and the 
such as a total byte count 252 and a checksum 254. The total drive task 244 stored in the updateable part 220 control the 
byte count 252 maintains a count of the total number of 50 normal operations of the bridge board 102, as described 
bytes of firmware stored in the updateable part 220. Hie above with reference to FIG. 1. 

checksum 254 is used by firmware stored in the fixed part if the firmware stored in the updateable part 220 is not 

222 to verify the validity of the firmware stored in the va ij d ( e . g>j the pr0 gram is corrupted), then the default 

updateable part 220, as described in more detail below. operating task 224 proceeds to the default host interface task 

The fixed part 222 stores one or more tasks, such as a 55 226, as shown in FIG. 2, The default host interface task 226 

default operating task 224, a default host interface task 226, and the default drive task 228 perform functions which are 

a default drive task 228 and a USB downloading task 230. substantially similar to the normal bridge board functions 

The default operating task comprises a start-up module 258 performed by the host interface task 242 and the drive task 

and a main module 256. 244 of the updateable part 220. 

The updateable part 220 stores firmware which may be 60 The default operating task 224 or the default host inter- 
downloaded and updated in-whole or in-part by the host 90 face task 226 may notify the host 90 that the microcontroller 
(FIG. 1) via the USB bus 110. In some cases, the firmware 106 is executing firmware stored in the fixed part 222, in 
updates may simply be in the form of revised data tables which case the host 90 may prompt the user to re attempt the 
used by the executable code. The host computer (not shown) firmware download. Alternatively, in another configuration, 
runs a utility that in used to allow the user to initiate 65 the host 90 checks whether the microcontroller 106 is 
downloads of firmware to the peripheral device. As executing firmware in the fixed part 222 or the updateable 
described below, this utility may be configured to notify the part 220. Alternatively, the default operating task 224 or the 
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default host interface task 226 may cause the device 100 
notify the user directly by generating a message, such as 
"invalid firmware update," on a display, such as a LED 
^ display. 

When the host 90 initiates downloading of a firmware 5 
update, the default host interface task 226 or the host 
interface task 242 (depending upon whether the update able 
firmware is corrupt) causes the USB downloading task 230 
to overwrite some or all of the firmware stored in the 
updateable part 220, including the byte count and checksum 30 
values 252, 254, with the firmware provided by the host 90. 
As part of this process, the firmware provided by the host 90 
may initially be written to the buffer 116 (FIG. 1), and then 
copied from the buffer 116 to flash memory 105 by the 
microcontroller 106. 35 

After the USB downloading task 230 downloads a firm- 
ware update to the updateable part 220, the USB download- 
ing task 230 jumps to the start-up module 258 of the default 
operating task 224, as shown in FIG. 2. The default oper- 
ating task 224 again determines whether the firmware stored 20 
in the updateable part 220 is valid. If the firmware stored in 
the updateable part 220 is valid, then the default operating 
task 224 passes the operation of the microcontroller 106 to 
the operating task 240 stored in the updateable part 220, as 
shown in FIG. 2. 

FIG. 2 illustrates one configuration of a sequence of tasks, 
modules and tables used by the microcontroller 106, but the 
tasks, modules and tables may be used by the microcontrol- 
ler 106 to perform other functions. In addition, other tasks, 3Q 
modules and/or tables may be used in addition to or instead 
of the tasks and modules shown in FIG. 2. 

While embodiments and applications of this invention 
have been shown and described, it will be apparent to those 
skilled in the art that various modifications are possible 35 
without departing from the scope of the invention. It is, 
therefore, to be understood that within the scope of the 
appended claims, this invention may be practiced otherwise 
than as specifically described. 

What is claimed is: 40 

1. A peripheral device, comprising: 

a microcontroller; and 

a nonvolatile memory which stores firmware that is 
executed by the microcontroller, the nonvolatile 
memory comprising: 
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an updateable part which stores updateable firmware, 
the updateable firmware comprising an error detec- 
tion code that is provided by a host computer during 
firmware updating to permit the updateable firmware 
to be verified; and 

a fixed part which stores fixed firmware, the fixed 
firmware including an initialization routine which 
uses the error detection code stored within the 
updateable part to determine whether the updateable 
firmware is valid, the fixed firmware further includ- 
ing default firmware which is used in place of the 
updateable firmware when the updateable firmware 
is invalid. 

2. The device of claim 1, in combination with a host 
software utility which notifies a user when the updateable 
firmware is invalid. 

3. The device of claim 1, wherein the device is an optical 
drive. 

4. The device of claim 1, wherein the device comprises a 
USB interface. 

5. In a microcontroller-controlled device with a nonvola- 
tile memory, a method of updating and checking firmware 
stored in the nonvolatile memory, comprising: 

receiving from a host computer a firmware update, includ- 
ing a first error detection code, and storing the firmware 
update within an updateable part of the nonvolatile 
memory; 

using firmware stored within a fixed part of the nonvola- 
tile memory to compute a second error detection code 
based on firmware stored in the updateable part of the 
nonvolatile memory; 

comparing the first and second error detection codes to 
determine whether the firmware stored in the update- 
able part of the nonvolatile memory is valid; and 

when, based on said comparing, the firmware stored in the 
updateable part is not valid, executing default firmware 
stored in the fixed part to control normal operation of 
the device. 

6. The method of claim 5, further comprising notifying a 
user when the firmware stored in the updateable part is 
invalid. 

7. The method of claim 5, wherein receiving the firmware 
update comprises receiving the update over a USB cable. 
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